Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9118EB2/7AC767DE066911EDB0AE8E37C4F9AE02/hgOgrKcgSw7-1k23DeUcdboDk1U.mft
File:                     hgOgrKcgSw7-1k23DeUcdboDk1U.mft (raw, json)
Hash identifier:          mmWdk6ta/qIgKgj4pZ/dvi2etjCDXjv/kfqnGr19Vt4=
Subject key identifier:   64:9E:A6:63:72:5A:81:27:CF:25:BA:20:8E:00:A1:1B:0D:4A:9D:12
Authority key identifier: 86:03:A0:AC:A7:20:4B:0E:FE:D6:4D:B7:0D:E5:1C:75:BA:03:93:55
Certificate issuer:       /CN=A9118EB2/serialNumber=8603A0ACA7204B0EFED64DB70DE51C75BA039355
Certificate serial:       0377
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hgOgrKcgSw7-1k23DeUcdboDk1U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9118EB2/7AC767DE066911EDB0AE8E37C4F9AE02/hgOgrKcgSw7-1k23DeUcdboDk1U.mft
Manifest number:          035E
Signing time:             Mon 11 May 2026 01:05:43 +0000
Manifest this update:     Mon 11 May 2026 01:05:42 +0000
Manifest next update:     Mon 18 May 2026 01:05:42 +0000
Files and hashes:         1: hgOgrKcgSw7-1k23DeUcdboDk1U.crl (hash: ysjv96iEAu0IfycgclbQa+Vk9Y/OT85eS0mbFqnXuzc=)
                          2: 208C7D2E066C11EDB31C2239C4F9AE02.roa (hash: 384lM558CG+awOCq+Jp4xJkMm0eBCvPqegdL9GG+nvU=)
                          3: 673C2B68A8BA11F096079D46C4F9AE02.roa (hash: iAesf40760Ge7OkqHg9mpMk5sp26zXObALVRo0oegXY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9118EB2/7AC767DE066911EDB0AE8E37C4F9AE02/hgOgrKcgSw7-1k23DeUcdboDk1U.crl
                          rsync://rpki.apnic.net/member_repository/A9118EB2/7AC767DE066911EDB0AE8E37C4F9AE02/hgOgrKcgSw7-1k23DeUcdboDk1U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hgOgrKcgSw7-1k23DeUcdboDk1U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 01:05:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 887 (0x377)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9118EB2, serialNumber=8603A0ACA7204B0EFED64DB70DE51C75BA039355
        Validity
            Not Before: May 11 01:05:42 2026 GMT
            Not After : May 18 01:05:42 2026 GMT
        Subject: CN=6a012b67-930d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:4a:4f:1b:60:79:6e:92:1f:a3:5d:24:bd:77:
                    10:41:98:cb:8b:a5:0f:1d:f6:29:6d:28:22:f0:54:
                    85:28:9e:d1:2a:7c:6a:fd:81:a3:c6:56:9c:f2:b5:
                    1c:69:50:65:af:4b:d4:2e:07:f1:e7:de:b4:7a:36:
                    70:6e:55:a4:5f:ac:c9:28:f1:91:68:1c:cf:5a:68:
                    56:a6:81:71:cd:c2:92:98:ac:0d:1e:63:7c:fe:44:
                    84:4b:27:3b:28:5a:b6:97:c2:16:26:dc:33:76:89:
                    dd:eb:8f:70:66:b7:f7:30:56:1f:9b:f5:44:20:0f:
                    f1:f8:85:a1:06:f1:78:48:b2:23:80:8f:2e:96:e0:
                    d0:96:43:81:cf:5e:c2:9b:fd:c0:5f:39:3d:76:86:
                    65:b0:b2:99:97:17:42:60:dc:27:85:2f:8b:56:80:
                    97:ee:2d:26:95:c8:9c:ec:d9:e1:aa:0c:81:93:48:
                    8d:3c:32:e7:ce:b3:a1:d9:7a:e7:15:2d:54:b7:c4:
                    d3:67:1c:ec:99:92:83:6f:36:50:fd:e5:4e:cc:13:
                    ce:cf:60:11:b4:71:aa:b4:01:65:c9:12:f3:d4:97:
                    eb:ea:3b:58:69:ef:bb:e4:b5:45:c3:d7:7b:71:fd:
                    11:77:9d:96:5e:6f:69:8b:a3:5f:6d:d1:02:6a:97:
                    46:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:9E:A6:63:72:5A:81:27:CF:25:BA:20:8E:00:A1:1B:0D:4A:9D:12
            X509v3 Authority Key Identifier:
                keyid:86:03:A0:AC:A7:20:4B:0E:FE:D6:4D:B7:0D:E5:1C:75:BA:03:93:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9118EB2/7AC767DE066911EDB0AE8E37C4F9AE02/hgOgrKcgSw7-1k23DeUcdboDk1U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hgOgrKcgSw7-1k23DeUcdboDk1U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118EB2/7AC767DE066911EDB0AE8E37C4F9AE02/hgOgrKcgSw7-1k23DeUcdboDk1U.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:80:df:a5:20:d9:26:cc:ef:63:19:38:e9:c9:2b:19:89:01:
         f8:b4:09:d6:c5:bc:1e:50:d6:e6:3e:7a:25:64:90:a1:27:84:
         9e:bb:73:2a:0b:b8:42:e6:91:86:82:10:84:38:6b:46:3a:47:
         e3:38:91:3b:1b:f2:4d:8b:35:23:0b:a7:e3:4c:f1:eb:31:51:
         ea:83:aa:23:fa:6f:f0:75:98:ee:dd:f1:48:a4:f2:42:83:62:
         c4:a8:40:9b:5a:21:f2:7b:03:ff:c2:77:bd:bb:85:2f:1d:3d:
         c9:91:2c:0f:73:66:d0:75:8c:17:10:f8:d1:45:c6:25:6e:cf:
         48:5a:2d:05:c0:c2:9b:52:3e:0b:92:58:fc:47:97:d6:21:a3:
         79:35:2b:b5:70:5b:4d:7e:88:8a:b0:22:8a:0a:46:35:e0:cd:
         df:f2:ca:ea:41:e0:ce:32:03:ea:ba:fc:1c:11:b6:15:99:3e:
         14:03:df:84:40:dd:51:2f:4a:31:91:83:e2:d1:80:57:7e:7f:
         aa:33:78:2f:d3:0e:c9:c3:5a:d4:91:9e:1b:96:ee:c1:9b:b3:
         b5:d1:74:ce:38:f8:97:90:91:2c:2e:6d:6b:d7:e4:e2:4c:e8:
         81:33:7f:06:6c:65:7e:70:99:48:33:67:95:ac:f6:4d:cc:4d:
         45:1f:6e:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:29:25 2026 by rpki-client